GSD-2022-1000286 scsi: target: iscsi: Make sure the np under each tpg is unique

scsi: target: iscsi: Make sure the np under each tpg is unique This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.302 by commit...

PT-2022-28607

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.180 Description The issue is related to the SCSI target iscsi component in the Linux Kernel, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven...

PT-2022-28766

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue is related to the SCSI target iscsi component in the Linux Kernel, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven...

PT-2022-28561

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.302 Description The issue is related to the SCSI target iscsi component in the Linux Kernel, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven...

PT-2022-28589

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.230 Description The issue is related to the SCSI target iscsi component in the Linux Kernel, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven...

PT-2022-28574

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.267 Description The issue is related to the SCSI target iscsi component in the Linux Kernel, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven...

PT-2022-28691

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue is related to the scsi target iscsi component, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28636

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.101 Description The issue is related to the SCSI target iscsi component in the Linux Kernel, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven...

AlmaLinux 8 : virt:rhel (ALSA-2020:1358)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:1358 advisory. QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server CVE-2020-1711 QEMU: slirp: OOB buffer access while emulating tcp protocols ...

CVE-2007-20001

A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operations to exhaust the StarWind service socket, which could lead to denial of service. This affects iSCSI SAN Windows Native Version 3.2.2 build 2007-02-20...

CVE-2013-20004

A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on each connection attempt. An attacker could create a denial of service state by trying to connect a non-existent target multiple times. This affects iSCSI SAN Windows Native Versio...

Design/Logic Flaw

A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operations to exhaust the StarWind service socket, which could lead to denial of service. This affects iSCSI SAN Windows Native Version 3.2.2 build 2007-02-20...

Design/Logic Flaw

A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on each connection attempt. An attacker could create a denial of service state by trying to connect a non-existent target multiple times. This affects iSCSI SAN Windows Native Versio...

CVE-2007-20001

The CVE-2007-20001 entry concerns StarWind iSCSI SAN/target where an attacker can script standard iSCSI Initiator operations to exhaust the StarWind service socket, causing denial of service. Affected: StarWind iSCSI SAN Windows Native, Version 3.2.2 build 2007-02-20. In connected PT-2022-7718 de...

CVE-2007-20001

A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operations to exhaust the StarWind service socket, which could lead to denial of service. This affects iSCSI SAN Windows Native Version 3.2.2 build 2007-02-20...

CVE-2013-20004

A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on each connection attempt. An attacker could create a denial of service state by trying to connect a non-existent target multiple times. This affects iSCSI SAN Windows Native Versio...

CVE-2013-20004

Summary: CVE-2013-20004 affects StarWind iSCSI Target/SAN (Windows Native) prior to a certain build of 6.0. Root cause: the service does not limit client connections and allocates memory on each connection attempt, causing memory leaks. Impact: potential denial of service by memory exhaustion whe...

PT-2022-7718 · Starwind · Starwind Iscsi San

Name of the Vulnerable Software and Affected Versions: StarWind iSCSI SAN version 3.2.2 build 2007-02-20 StarWind iSCSI SAN versions prior to 3.5 build 2007-08-09 Description: A flaw was found in the StarWind iSCSI target, allowing an attacker to script standard iSCSI Initiator operations to...

PT-2022-7731 · Starwind · Starwind Iscsi Target

Name of the Vulnerable Software and Affected Versions: StarWind iSCSI target versions prior to 6.0 build 2013-03-20 Description: A flaw was found in the StarWind iSCSI target, where the StarWind service does not limit client connections and allocates memory on each connection attempt. This could...

CVE-2013-20004: Uncontrolled Resource Consumption

A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on each connection attempt. An attacker could create a denial of service state by trying to connect a non-existent target multiple times. This affects iSCSI SAN Windows Native Versio...